Nothing kept them from having an XP (VM) offline just for compilation. It was best practice for security related products (actually for any development) to develop and compile offline anyway.